CVE-1999-1405

Summary

CVE-1999-1405 is a vulnerability affecting the snap command in AIX versions prior to 4.3.2. This issue arises because the snap command creates the /tmp/ibmsupt directory with world-readable permissions and fails to remove or clear it after executing snap -a. Consequently, local users can exploit this vulnerability by creating a file named /tmp/ibmsupt/general/passwd before root runs snap -a, thereby gaining unauthorized access to the shadowed password file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.